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Abstract 

We show that almost all n-bit Boolean functions have bounded-error quantum query com- 
plexity at least n/2, up to lower-order terms. This improves over an earlier n/4 lower bound 
of Ambainis |Amb99j . and shows that van Dam's oracle interrogation }Dam98j is essentially 
optimal for almost all functions. Our proof uses the fact that the acceptance probability of a 
T-query algorithm can be written as the sum of squares of dcgree-T polynomials. 
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1 Introduction 

Most known quantum algorithms have been developed in the setting of quantum query complexity, 
which is the quantum generalization of the model of decision tree complexity. Here an algorithm 
is charged for each "query" to the input bits, while intermediate computation is free (see |BW02] 
for more details about this model). For certain specific functions one can obtain large quantum- 
speedups in this model. For example, Grover's algorithm [Gro96j computes the n-bit OR function 
with 0(y/n) queries, while any classical algorithm needs fi(n) queries. Many more such polyno- 
mial speed-ups are known, see for example |Amb07[ ISan08l IDHHM06| IBell2j . If one considers 
partial functions there are even exponential speed-ups, for example [D J921 IS"im97| ISho97l IBCW02] . 
Substantial quantum speed-ups are quite rare, and exploit very specific structure in problems that 
makes those problems amenable to quantum speed-ups. 

On the other hand, one can also obtain a smaller speed-up that holds for almost all Boolean 
functions. Classically, almost all Boolean functions / : {0, l} n —> {0, 1} have bounded-error query 
complexity n, minus lower-order terms. This is quite intuitive: if we have only seen 99% of the 
n input bits, then the restriction of a random function to the 1% remaining variables will still be 
roughly balanced between and 1-inputs. In contrast, van Dam |Dam98j exhibited a beautiful 
quantum algorithm that recovers the complete n-bit input x with high probability using roughly 
n/2 quantum queries. Briefly, his algorithm is as follows: 

1. With T = n/2 + 0{^n\og{l/e)) and B = Y,J =0 (") being the number of y E {0, l} n with 
weight \y\ < T, set up the n-qubit superposition -4= Yl y e{o,i}»-.\y\<T \v)- 

2. Apply the unitary \y) \— > ( — l) x ' v \y). We can implement this using T queries for |y| < T. 

3. Apply a Hadamard transform to all qubits and measure. 
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To see correctness of this algorithm, note that the fraction of n-bit strings y that have weight > T 
is <C e. Hence the state obtained in step 2 is very close to the state X^j/e{o i} n ( — ' v \v)^ whose 
Hadamard transform is exactly \x). 

Since obtaining x suffices to compute f(x) for any / of our choice, van Dam's algorithm implies 
that the e-error quantum query complexity of / is 



Qe{f) — n/2 + 0(y/nlog(l/e)) for all Boolean functions. 

It is known that this upper bound is essentially tight for some Boolean functions. For example, 
Q £ {f) = \ n /2] for the n-bit Parity function [BBC + 0l[IFG(;S98| . Our goal in this paper is to show 
that it is tight for almost all Boolean functions, i.e., that Q e (f) is essentially lower bounded by 
n/2 for almost all / (and fixed e). How can we prove such a lower bound? Two general methods 



are known for proving quantum query lower bounds: the polynomial method BBC + 01 and the 



adversary method |Amb02[ IHLS07 . As we explain below, in their standard form neither method 



is strong enough to prove our desired n/2 lower bound. 



First, the adversary method in its strongest incarnation |HLS07[ Theorem 2] has the form 



where the "negative-weights adversary bound" ADV^(f) is a quantity that is at most n. Accord- 
ingly, for constant error probability e the adversary method can only prove lower bounds of the 
form cn for some c < 1/2. 

Second, the polynomial method uses the fact (first proved in |FR,99LlBBC T oi) ) that the accep- 
tance probability of a T-query algorithm can be written as a degree-2T n-variate multilinear real 
polynomial p(x) of the input. If the algorithm computes / with error probability < e, then p(x) 
will approximate f(x): p(x) G [0,e] for every x G / _1 (0) and p{x) € [1 — e, 1] for every x G 
Accordingly, a lower bound of d on the e-approximate polynomial degree deg e (/) implies a lower 
bound of d/2 on the e-error quantum query complexity of /. This is how Ambainis |Amb99| proved 
the current best lower bound of roughly n/4 that holds for almost all n-bit Boolean functions: he 
showed that almost all / satisfy deg e (/) > (1/2 — o(l))n. However, O'Donnell and Servedio (OS08J 
proved a nearly matching upper bound: deg e (/) < (1/2 + o(l))n for almost all /. Hence Ambai- 
nis's lower bound approach via approximate degree cannot be improved to obtain our desired lower 
bound of n/2 on Q e (/)Ill This suggests that also the polynomial method is unable to obtain the 
conjectured factor 1/2 in the lower bound. 

However, looking under the hood of the polynomial method, it actually gives a bit more infor- 
mation about the acceptance probability: p(x) is not an arbitrary degree-2T polynomial, but the 
sum of squares of degree-T polynomials. Using this extra information, we prove in this paper that 
indeed Q e {f) > n/2 up to lower-order terms for almost all /. 



In fact, the unbounded- error quantum query complexity of almost all Boolean functions is only n/4 up to lower- 
order terms. This follows from the degree upper bound of [OS08] combined with [BVW07I Theorem 1] and the fact 
that d-bit Parity can be computed with [d/2] quantum queries. 
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2 Proof 



Suppose we have a quantum algorithm that uses T queries to its n-bit input x. Then by |BBC + 01 
Lemma 4.1], its final state can be written as a function of the input as 

^2a z (x)\z), 

z 

where z ranges over the computational basis states of the algorithm's space, and the amplitudes 
ot z (x) are complex- valued multilinear n-variate polynomials of degree < T. We assume w.l.o.g. that 
the algorithm determines its Boolean output by measuring the first qubit of the final state. Then 
the acceptance probability (as a function of input x) is the following polynomial of degree < IT: 

z:z\ = \ 

Let a z G C 2 ™ denote the vector with entries a z (x). Define the following 2 n x 2 n matrix P: 

p = Yl aza *- 

z:z\ = \ 

The diagonal entry P xx of this matrix is p(x). Since P is positive semidefinite, we have^l 

m = Tr(p) = p^)- 

xe{o,i} n 

With H denoting the n-qubit Hadamard transform, Ha z is proportional to the Fourier transform 
oT z , which has support only on the B = Yli=o il) monomials of degree < T. Hence the matrix 
HPH has support only on a B x B submatrix. 

It will be convenient to use +1 and —1 as the range of a Boolean function, rather than 
and 1. Consider Boolean function / : {0, l} n —> {±1}- For s £ {0, l} n , the corresponding Fourier 
coefficient of / is defined as f(s) = ^ J2x(~ 1) S x f( x )- Let F be the 2 n x 2 n diagonal matrix with 
diagonal entries f{x). Define F = HFH. Then for s,t € {0, l} n , we have 

F s , t = (s\HFH\t) = 1 ^(-l)-(-l)^ = 1 ^(-l)(^)- /( x) = f(s t). 

x,y x 

Let Ft denote F after zeroing out all s,t-entries where \s\ > T and/or \t\ > T. Note that HPH 
doesn't have support on the entries that are zeroed out, hence {HPH , F) = {HPH, Ft). 

Suppose our T-query quantum algorithm computes / with worst-case error probability at most 
some fixed constant < e. Output 1 means the algorithm thinks f{x) = 1, and output means it 

2 We use the following matrix-analytic notation. For m x m matrices A and B, define inner product {A, B) = 
Tt(A*B) = £\ . A*jBij . Note that this inner product is basis-independent: for every unitary U we have 
{UAU* ,UBU*) — (A,B). Let \\A\\ denote the (unitarily invariant) Schatten p-norm of A, which is the p-norm 
of the m-dimensional vector of singular values of A. In particular, 1 1 ^4 1 1 x is the sum of A's singular values, and H-AH^ 
is its largest singular value. It is easy to see that = Tr(A*A) = \Aij\ 2 , and (A, B) < II^HJI-BH^. 
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thinks f(x) = — 1. Then for every x £ {0, l} n , 2p(x) — 1 differs from f(x) by at most 2e. Hence: 



(l-2e)2 n < {2P-I,F) 

= 2(P,F)-^/(x) 



< 



2(HPH,F)-^f(s 

X 

2{HPH,F T )-Y J f{*) 

X 

2 ii p iii|N| -E/c*) 

II Moo ' — ' 

X 

Ft\\ ^/(x). 



We can assume w.l.o.g. that f(x)>0 (if this doesn't hold for / then just take its negation, 
which has the same query complexity as /). Since ^2 x p(x) < 2 n , we get 

F T >l/2-e. (1) 

oo 

The technically hard part is to upper bound Ft for most /. So consider the case where / : 

oo 

{0, l} n — > {±1} is a uniformly random function, meaning that the 2 n values /(x) are independent 
uniformly random signs. In the next subsection we show 



Claim 1. With probability 1 — o(l) (over the choice of f) we have 



F T 



O 



Combining this with the lower bound ([T]), we get that B > 2 n °( n >. On the other hand, a 
well-known upper bound on the sum of binomial coefficients is B = YlJ=o (i) — 2 nH ^ T / n \ where 
H(q) = —qlogq— (1 — q) log(l — q) denotes the binary entropy function. Hence, 2 n ~°^ < 2 n -^( T / n ) 
which implies T > n/2 — o(n). This shows that Q e (f) > n/2 — o(n) for almost all / (and fixed 
constant e). 



2.1 Proof of Claim [U 

Below, unless mentioned otherwise, probabilities and expectations will be taken over the random 
choice of /. We choose T = n/2 — o(n) sufficiently small that B = Yll=o (?) = °(2 n )i i- e -) the °( n ) 
term in T is taken to be uj(y/n). 

Let \i be the i-ih eigenvalue of Ft- Since Ft is symmetric we have 



F T 



max I \i 



2A- 



Tr(F|^ 



We are going to show that 



E 



Tr(F$ k )} =o(B {B/2 n ) k 



(2) 
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for every constant k (with a big-0 constant depending on k). This means that, using Markov's 
inequality, 



Pr 



F T 



> CJnB 1 + 1 / k /2 n 



< Pr 



Pr 



E 



< 



/Tr(F2 fc ) > CJnB 1 + 1 / k /2 

Tr(F| fe ) > C 2k n k B k+1 /2 nk 
Tr(F| fc )" 

o{l). 



C 2k n k B k+1 /2 nk 



Since this is true for any constant k, Claim Q] follows. 

So now our goal is to prove ([2]). Below we let each of si,...,S2k range over the B ra-bit 
strings of weight < T, and each of xi, ■ ■ ■ ,X2k range over {0, l} n . For simplicity we abbreviate 
s = si, S2, ■ ■ ■ , S2k and x = x\, X2, ■ ■ ■ , X2k- Writing out the 2/c-fold matrix product, we have 



E 



Tr(F| fc ) 



E 



/( S l © S 2)/(S 2 S 3 ) • • • f(s 2 k Si 

s 

?L E E E [(-i) (sies2) - xi /(^i) • • • (-i) (S2fcffisi) ' X2fc /(x 2fc ) 

s x 

_L Y ^(_i)(^®^)-i+-+(^©«i)- 2fe E . . . f( X2k) ] . 



For a particular y G {0, l} n , there are as many Boolean functions having f(y) = 1 as having 
f(y) = — 1) independently of what is known about values of / on other inputs. Thus, if any y 
occurs an odd number of times in x = (x\, . . . ,X2fc)> then E[/(xi) • • • f(x2k)] = 0. So only those 
summands are left where all multiplicities of distinct values among x±, . . . ,X2k are even. We call 
such x even. We have 



E 



Tr(F| fe ; 



2 2 



1 ^ ^ ' -^liiCsiffisj+i)-^ 



s x even 



-y 

Ink / > 



E 



E E (-D 



EL, I 



= , (Si©Si+l))-J- (J) 



(3) 



partition of {l,...,2fc} 
into even non-empty I\,...,I r 



different 



where S2fc+i = s i and the second summation is over all partitions of {1, . . . , 2k} into even-sized 
non-empty parts I\ , . . . , I r with the implied condition that Xi = Xj iff i and j belong to the same 
part. Since the number of such partitions (I±,l2, . . . ,I r ) depends only on k (which is a constant), 
it suffices to prove that each term in the sum is of the order 0(B(B/2 n ) k ). We will do this by 
proving 

Claim 2. For any fixed m and any partition I\, . . . , I r of {1, . . . , m}: 

Y Y (-l) S J=i*' (s5 " sW) = 0(B m ~ r+1 ■ 2 nr ) (4) 

s xW,...,x^ 
different 

where tj(s) = ©j g /. (si © Sj+i), s m +i = s\, and the big-0 constant depends on m and the partition. 
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We first show that Claim [2] implies Claim [TJ In our case, m = 2k. Since B = o(2 n ), the upper 
bound B 2k ~ r+1 ■ 2 nr increases when r increases. Since each partition of {1, ... , 2k} into even-sized 
non-empty parts I\, . . . , I r must contain at least 2 elements in each we must have r < (2k)/ 2 = k 
and every term of the sum ([3]) is upper bounded by 



It remains to prove Claim [21 which we do by induction onr. If r = 1 then t\(s) = ffi^Li (.Sj©.Sj+r) 
includes each Sj exactly twice and hence sums to the all-0 string, hence 

(-l) tl{ ^ x = Y^ E (-l)°' x = B m -2 n . 

s a;e{0,l} n 3 a;e{0,l} n 

For the inductive step, suppose Claim [2] is true for r — 1. We rewrite the left-hand side of (jJJ) as 
£ £ (_l)EJ=i*i(s)-*w 

different 

= EE E (-iF-^^-EE E (-iF-^^. (5) 

a X W x (2) ,...,a; (r) ? a = 2 z( 2 ),...,a;M 

different different, x< 1 )=x( a ) 

Let us estimate both sums of ©. Since YlxW (— l)* 1 ^) 1 ' 1 ' = 2 n if ti(s) = 0™, and = otherwise, 
the first sum equals 

T E E (-i) E ?= atj(a),!eW . (6) 

£ti(S)=0 a .(2) ) ... )Z M 
different 

We now transform this sum into the form of the left-hand side of with both m and r smaller 
by 1 compared to their current values. After that, we will apply the induction hypothesis. 

Let i be such that I G I\, I — 1 ^ 1\. Then t\(s) contains si with coefficient 1 (because h(s) 
includes si © s^+i but not si-\ © sg). We can use the condition t±(s) = to express sg in terms of 
si, . . . , and s^+i, . . . , s m as follows: 

s e = s e+ i® (si©s i+ i). (7) 

Let 6 be such that I — 1 G Then contains © and we can substitute (|7|) into ife(s), 
obtaining 

t 6 (S) = Si_ X ® S t+1 © (SiffiS m )ffi (Si0S i+1 ). 

ielr.i^i i€l b :i^£-l 

We can now remove the variable sg (because it was only contained in s^_i © sg and S£ © s^+i) and 
redefine /;> to be Ii U i& \ {^}. Then we get that ([6]) is equal to 

2 n ^ ^ (_i)Ej-2 t i(*)' :c(j) = 2 n ■ O ^B m ~ r+1 • 2 n(r ~ 1 ^ = O (B m ~ r+1 • 2 nr ) 

Sl,...,S«_i £.(2) ^ ^(r) 
£+i> i "i different 
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with the estimate following from the induction hypothesis (with both m and r being smaller by 1). 
As for the second sum of ([5]), it is equal to 



2 (-l) E ^= 3 ^ )(S),xW = O ( B m ~ r+2 ■ 2< r ~^ 



a=2 s* x( 2 ',...,x (r ) 
different 

where tj(s) = tj(s) except for t^\s) = t a (s) © h(s) (thus merging the partition parts I\ and 
I a ). We have eliminated x^ and apply the induction hypothesis (with r being smaller by 1 and m 
remaining the same). The outer sum over a introduces only a factor depending on r < m. 

Since B = o(2 n ) we have B m ~ r+2 ■ 2< r ~^ = o{B m - r+1 ■ 2 nr ). Hence the bound on the first sum 
in (0) is of a larger order and we have completed the proof of Claim [21 
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